CISSP ISC2 Exam Questions and Free Practice Test

Question 37

- (Exam Topic 11)
What is an important characteristic of Role Based Access Control (RBAC)?

A. Supports Mandatory Access Control (MAC)

B. Simplifies the management of access rights

C. Relies on rotation of duties

D. Requires two factor authentication

Correct Answer:B

Question 38

- (Exam Topic 11)
Which of the following provides the minimum set of privileges required to perform a job function and restricts the user to a domain with the required privileges?

A. Access based on rules

B. Access based on user's role

C. Access determined by the system

D. Access based on data sensitivity

Correct Answer:B

Question 39

- (Exam Topic 9)
What maintenance activity is responsible for defining, implementing, and testing updates to application systems?

A. Program change control

B. Regression testing

C. Export exception control

D. User acceptance testing

Correct Answer:A

Question 40

- (Exam Topic 11)
Which of the following prevents improper aggregation of privileges in Role Based Access Control (RBAC)?

A. Hierarchical inheritance

B. Dynamic separation of duties

C. The Clark-Wilson security model

D. The Bell-LaPadula security model

Correct Answer:B

Question 41

- (Exam Topic 9)
Which of the following MUST be done when promoting a security awareness program to senior management?

A. Show the need for security; identify the message and the audience

B. Ensure that the security presentation is designed to be all-inclusive

C. Notify them that their compliance is mandatory

D. Explain how hackers have enhanced information security

Correct Answer:A

Question 42

- (Exam Topic 1)
Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

A. Examine the device for physical tampering

B. Implement more stringent baseline configurations

C. Purge or re-image the hard disk drive

D. Change access codes

Correct Answer:D

START CISSP EXAM